Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
File: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft (raw, json)
Hash identifier: 5eIXhApBmHK+6A07rThpVcwv9ChxtCVj6JabkGypogU=
Subject key identifier: D1:A7:BA:C0:13:1A:7C:80:3E:82:B8:5D:1B:5B:E5:CB:C1:BD:CD:17
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial: 019D34F6019C9667E8CA4974A34F312D7C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
Manifest number: 0583
Signing time: Sat 28 Mar 2026 15:00:30 +0000
Manifest this update: Sat 28 Mar 2026 15:00:30 +0000
Manifest next update: Sun 29 Mar 2026 15:00:30 +0000
Files and hashes: 1: 1cBxWcRD-ajLhLNgA3S5Au__sOc.roa (hash: 5ni5kkd9OlF+FGiiy/ZgvxZvVXHGX7AhkHl4yh5xEQE=)
2: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl (hash: +z0w+gjlhFt6frTOPV0Iq7C1tP30FRuA/gI/IS1zzpc=)
3: a6e3sASUiAxUoLrPtfCHLqgPz1A.roa (hash: MgKnL/M9TiKwgJnGXFmtPosWzhlu5kiGbu/gEj5vWEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:f6:01:9c:96:67:e8:ca:49:74:a3:4f:31:2d:7c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Validity
Not Before: Mar 28 15:00:30 2026 GMT
Not After : Mar 29 15:00:30 2026 GMT
Subject: CN=d1a7bac0131a7c803e82b85d1b5be5cbc1bdcd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:30:fb:63:ae:fc:86:0f:73:fd:25:57:41:47:
84:2e:6c:a1:a0:43:bf:01:30:46:74:e0:ef:9c:ed:
20:06:8f:4f:f1:9a:f6:3b:e3:e7:f4:ae:32:9b:b1:
0c:9e:a7:a9:fb:2d:a1:40:db:cd:b0:51:34:83:9a:
d1:e1:43:63:8f:4e:f0:32:4b:a8:ab:55:cb:59:41:
d1:75:f9:43:18:98:71:9f:28:c7:8a:a4:f5:11:c4:
32:0a:8d:d2:6d:98:11:a0:45:0e:e9:42:4a:f9:10:
cf:bc:54:3b:ce:55:12:2c:e2:6b:ff:7a:85:2e:2b:
57:6a:41:5e:9b:d7:b7:11:11:4d:c8:b8:6d:3c:7d:
3f:64:47:63:0c:3b:d3:d5:94:d8:89:cd:d4:0e:81:
68:2a:32:cb:e8:6c:fd:50:9f:a1:c0:52:7a:49:e1:
af:44:11:60:30:46:af:36:9f:97:02:70:a1:ce:d4:
9d:b5:cd:0f:d2:2b:ad:30:83:61:27:59:5e:12:60:
8b:86:9c:86:b1:1c:04:35:b0:61:44:79:0b:52:e4:
7d:d5:2b:fe:64:1a:33:b5:79:f7:b5:bb:25:10:6c:
36:10:7a:86:6e:02:fc:ef:cf:06:e7:ca:4d:db:f8:
27:c4:e1:df:cd:d2:e1:60:81:a9:0c:18:b3:53:98:
1b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A7:BA:C0:13:1A:7C:80:3E:82:B8:5D:1B:5B:E5:CB:C1:BD:CD:17
X509v3 Authority Key Identifier:
keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2c:7b:38:03:1c:ed:d5:16:75:67:df:aa:fa:18:b6:93:6e:
6f:65:31:7a:a4:93:e4:d2:a5:a3:df:9d:12:2d:bd:cc:cb:5e:
6e:bd:84:27:1f:42:ea:bb:ad:8e:ca:6c:ee:e4:a8:6c:f8:ab:
bc:ff:bb:98:68:c0:c3:eb:1f:bd:02:d2:31:aa:95:d4:c0:a6:
04:c3:25:3d:7b:c2:be:38:14:c4:86:59:d5:69:42:89:18:56:
0c:1b:94:70:03:35:e2:2e:6e:77:8b:e8:2d:e9:5f:cc:68:e3:
e4:44:5d:9c:c4:83:4d:e7:96:62:4a:e3:76:14:09:52:ae:31:
30:6e:f7:0d:7e:de:ec:63:c5:79:4e:41:25:15:85:c9:8c:fb:
44:b7:e9:68:77:af:b7:b0:52:28:ad:f3:fa:c2:20:5a:bf:25:
c6:6f:93:4d:d6:eb:80:bc:d6:2e:ad:71:72:3e:79:a3:bc:15:
dc:48:68:61:cd:c9:b1:3f:2f:ff:f1:dd:1e:a8:c1:e3:27:ad:
83:64:4b:a2:2a:04:84:0b:ab:65:b8:76:7b:c2:fc:3f:8c:61:
13:bd:7b:03:5e:41:e0:2c:41:9c:5f:ce:30:e6:d8:42:4f:0a:
01:8b:f7:c8:15:8a:56:41:e5:0e:f6:ae:84:f9:32:e7:35:15:
e7:65:fd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 20:11:32 2026 by rpki-client